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DETAILED ACTION 

This office action is in response to application filed on February 26, 2002. Original 
application contained Claims 1-15. Therefore, presently pending claims are 1- 15. 

Claim Rejections - J J USC § 102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 2 1 (2) of such treaty in the English language. 

Claims 1-15 are rejected under 35 U.S.C. 102(e) as being anticipated by Gutman et al. U. 
S. Patent 6,298,383. 

1 . Regarding Claim 1 Gutman teach and describe a distributed network (Fig. 6-8) which is 
registered with a unique domain name, said network comprising a number of clients and a 
number of authentication servers, said clients and said authentication servers being 
communicatively coupled to each other via a global telecommunication network, each of said 



Application/Control Number: 1 0/086, 1 04 Page 3 

Art Unit: 2131 

authentication servers having a fully qualified domain name which is a local host name with said 
unique domain name appended (coL4 line 20 to line 52), 

a distributed authentication system, wherein a given user enters a global user identification 
(GUID) and a password for authentication to be carried out at a target authentication server, said 
GUID comprising a user name, a delimitation symbol, and a domain portion which is same as the 
local host name of said target authentication server (col. 7 line 62 to col.8 line 35), 
said distributed authentication system comprising: means for parsing an entered GUID and 
extracting said domain portion therefrom; means for appending said unique domain to said 
domain portion to form a fully qualified domain name (formed FQDN); means for translating 
said FQDN to an Internet Protocol (IP) address representing said target authentication server; 
means for sending said user name and password to said target authentication server for 
authentication; and means for distributing and caching an authentication result (col.8 line 36 to 
coL9 line 54). 

2. Regarding Claim 5 Gutman teach and describe a method for providing distributed 
authentication service (Fig. 6-13), wherein a given user enters a global user identification 
(GUID) and a password for authentication to be carried out at a target authentication server, said 
GUED comprising a user name, a delimitation symbol, and a domain portion which is same as the 
local host name of said target authentication server (col.7 line 62 to coL8 line 35), 
said method comprising the computer-implemented steps of: entering the user's GUID and 
password; parsing said entered GUID and extracting said domain portion from said GUID; 
appending a imique domain name to said domain portion to form a fully qualified domain name 
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(FQDN); looking up said FQDN in a domain name system (DNS) to obtain an address 
representing said target authentication server; sending said user name and password to said target 
authentication server for authentication; and distributing and caching an authentication resuU 
(col.7 Hne 62 to coL8 line 35). 

3. Regarding Claim 7 Gutman teach and describe a distributed network which is registered 
with a unique domain name, said network (Fig. 6-8), comprising a number of clients and a 
number of authentication servers, said clients and said authentication servers being 
communicatively coupled to each other via a global telecommunications network, each of said 
authentication serv^ers having a fully qualified domain name which is a local host name with said 
unique domain name appended (col.4 line 20 to line 52), 

a method for providing distributed authentication service, wherein a given user enters a global 
user identification (GUID) and a password for authentication to be carried out at a target 
authentication server, said GUID comprising a user name, a delimitation symbol and a domain 
portion which is same as the local host name of said target authentication server (col.7 line 62 to 
col.8 line 35), 

said method comprising the steps of: entering the user's GUID and password; parsing entered 
GUID and extracting said domain portion fi'om said GUID; appending said unique domain name 
to said domain portion to form a fiiUy qualified domain name (FQDN); checking a local list of 
registered fiiUy qualified domain names (FQDN) to obtain an Internet Protocol (IP) address for 
said target authentication server, wherein each FQDN in said local list is mapped to a unique IP 
address; sending said user name and password to said target authentication server for 
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authentication; and distributing and caching an authentication result (col.8 line 36 to col.9 line 
54). 



4. Regarding Claim 9 Gutman teach and describe a distributed network which is registered 
with a unique domain name (Fig. 6-8), said network comprising a number of clients and a 
number of authentication servers, said clients and said authentication servers being 
communicatively coupled to each other via a global telecommunications network, each of said 
authentication servers having a fully qualified domain name which is a local host name with said 
unique domain name appended (col.4 line 20 to line 52), 

a method for providing distributed authentication service, wherein a given user enters a global 
user identification (GUID) and a password for authentication to be carried out at a target 
authentication server, said QUID comprising a user name, a delimitation symbol and a domain 
portion which is same as the local host name of said target authentication server (col.7 line 62 to 
coL8 line 35), 

said method comprising the computer-implemented steps of: entering the user's GUID and 
password; parsing said GUID and extracting said domain portion; appending said unique domain 
name to said domain portion to form a fully quahfied domain name (FQDN) in said unique 
domain; checking a local list of registered fully qualified domain names (RFQDN) to obtain an 
Intemet Protocol (IP) address for said target authentication server, wherein each RFQDN in said 
local list is mapped to a unique IP address; if said step of checking fails, looking up a domain 
name system (DNS) to obtain an hitemet Protocol (IP) address representing said FQDN; sending 
said user name and password to said target authentication server for authentication; and 
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distributing and caching an authentication result (col.8 line 36 to col.9 line 54). 

5. Regarding Claim 1 1 Gutman teach and describe a method for providing distributed 
authentication service (Fig. 6-13), wherein a given user enters a global user identification 
(GUID) and a password for authentication to be carried out at a target authentication server, said 
QUID comprising a user name, a delimitation symbol and said target authentication server's 
domain name (col.7 Une 62 to col.8 line 35), 

said method comprising the steps of: entering the user's QUE) and password; parsing said 
entered GUID and extracting said target authentication server's domain name; pre-pending said 
common local host name to said target authentication server's domain name to form a fully 
qualified domain name (FQDN); checking a local hst of registered fully qualified domain names 
(RFQDN) to obtain an address for said target authentication server, wherein each RFQDN in 
said local is mapped to a unique address; sending said user name and password to said target 
authentication server for authentication; and distributing and caching an authentication result 
(col.8 line 36 to col.9 line 54). 

6. Regarding Claim 14 Gutman teach and describe a distributed network comprising a 
number of clients and a number of authentication servers (Fig. 6-8), said clients and said 
authentication servers being communicatively coupled to each other via a global 
telecommunications network, each of said authentication servers having a fiiUy qualified domain 
name which is a local host name with its domain name appended (col.4 line 20 to line 52), 
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a method for providing distributed authentication service, wherein a given user enters a global 
user identification (GUID) and a password for authentication to be carried out at a target 
authentication server, said GUID comprising a user name, a delimitation symbol and said target 
authentication server's domain name (col.7 line 62 to col.8 line 35), 
said method comprising the steps of: entering the user's GUID and password; parsing said 
entered GUID and extracting said target authentication server's domain name; checking a local 
list of domain names to obtain an Intemet Protocol (IP) address for said target authentication 
server, wherein each domain name in said list is mapped to a registered authentication server's IP 
address; sending said user name and password to said target authentication server for 
authentication; distributing and caching an authentication resuU (col.8 line 36 to col.9 line 54). 



7. Regarding Claims 2-4, 6, 8, 10, 12-13, and 15 are rejected applied as above rejecting 
Claims 1, 5, 7, 9, 1 1, and 14. Furthermore, Gutman teach and describe a distributed 
authentication system, wherein: 

As per Claim 2, further comprising: means for automatically mapping any unrecognized 
FQDN into a default server which carries out authentication on the user's authentication request 
(col. 9 line 32 to line 54). 

As per Claim 3, said means for translating consults a domain name system (DNS) to 
obtain an Intemet Protocol (IP) address representing said target authentication server (col. 5 line 1 
to line 37). 
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As per Claim 4, said means for translating consults a local mapping list to obtain an 
Internet Protocol (IP) address representing said target authentication server (col.5 line 1 to line 
17). 

As per Claim 6, flirther comprising the steps of: if said step of looking up fails, 
automatically mapping an unrecognized FQDN into a default server which performs 
authentication on the user's authentication request (col.9 line 16 to col. 10 line 11). 

As per Claim 8, further comprising the step of: if said step of checking fails, 
automatically mapping an unrecognized FQDN into a default server which perforais 
authentication on the user's authentication request (col.9 line 16 to col. 10 line 1 1). 

As per Claim 10, further comprising the step of: if said step of looking up fails, 
automatically mapping an unrecognized FQDN into a default server which performs 
authentication on the user's authentication request (col.9 line 16 to col. 10 line 1 1). 

As per Claim 12, further comprising the step of: if said step of checking fails, looking up 
said FQDN in a domain name system (DNS) to obtain an address representing said target 
authentication server (col.9 line 16 to col. 10 line 11). 

As per Claim 13, further comprising the steps of: if said step of looking up fails, 
automatically mapping an unrecognized FQDN into a default server which performs 
authentication on the user's authentication request (col.9 line 16 to col.lO line 1 1). 

As per Claim 15, further comprising the step of: if said step of checking fails, 
automatically mapping an unrecognized domain name into a default server which performs 
authentication on the user's authentication request (coL9 line 16 to coLlO line 1 1). 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Syed Zia whose telephone number is 571-272-3798. The 
examiner can normally be reached on 9:00 to 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Pubhc PAIR. Status information for unpublished 
appUcations is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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